Cormac Flanagan Shaz Qadeer Thread-Modular Model Checking. 213-224 2003 conf/spin/2003 SPIN http://dx.doi.org/10.1007/3-540-44829-2_14 db/conf/spin/spin2003.html#FlanaganQ03